FreeXL read_biff_next_record Code Execution Vulnerability(CVE-2017-2923)

Summary An exploitable heap based buffer overflow vulnerability exists in the readbiffnextrecord function of FreeXL 1.0.3. A specially crafted XLS file can cause a memory corruption resulting in remote code execution. An attacker can send malicious XLS file to trigger this vulnerability. Tested...

Continental AG Infineon S-Gold 2 (PMB 8876)

CVSS v3 8.8 ATTENTION: Remotely exploitable/low skill level to exploit. Public exploits are available. Vendor: Continental AG Equipment: Infineon S-Gold 2 PMB 8876 Vulnerabilities: Stack-Based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer AFFECTED PRODUC...

ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities

CVE-2017-6086 Multiple CSRF vulnerabilities in ViMbAdmin version 3.0.15 Product Description ViMbAdmin is a web-based interface used to manage a mail server with virtual domains, mailboxes and aliases. It is an open source solution developed by Opensolutions and distributed under the GNU/GPL licen...

CVE-2016-0382

The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356...

CVE-2016-0382

The CVE-2016-0382 entry applies to IBM Tealeaf Customer Experience (Consumer Experience) versions 8.7 through 9.0.2, where the portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. The root cause is i...

CVE-2016-0382

The IBM Tealeaf Consumer Experience 8.7, 8.8, and 9.0 portal exposes some of its operational state in a form that may be accidentally captured and exposed by network infrastructure components such as IIS. IBM X-Force ID: 112356...

Nuxeo Platform 6.x / 7.x Shell Upload

Description Nuxeo Platform is a content management system for enterprises CMS. It embeds an Apache Tomcat server, and can be managed through a web interface. One of its features allows authenticated users to import files to the platform. By crafting the upload request with a specific X-File-Name...

Iceni Argus PDF Font-Encoding GlyphMap Adjustment Code Execution Vulnerability

Summary An exploitable arbitrary heap-overwrite vulnerability exists within Iceni Argus. When it attempts to convert a malformed PDF to XML, it will explicitly trust an index within the specific font object and use it to write the font’s name to a single object within an array of objects. Due to ...

Ubiquiti UniFi 5.2.7 Critical Vulnerability

Exploit for hardware platform in category web applications together with my colleague we found two uncritical vulnerabilities you'll find below. Product: UniFi AP AC Lite Vendor: Ubiquiti Networks Inc. Internal reference: ? Bug ID Vulnerability type: Incorrect access control Vulnerable version:...

CVE-2016-0288

CVE-2016-0288 affects IBM Security AppScan Standard (8.7.x, 8.8.x, and 9.x prior to 9.0.3.2) and Security AppScan Enterprise. The flaw is an XML External Entity (XXE) issue caused by improper handling of XML external entities, allowing remote authenticated users to read arbitrary files by submitt...

CVE-2015-4989

The portal in IBM Tealeaf Customer Experience before 8.7.1.8814, 8.8 before 8.8.0.9026, 9.0.0, 9.0.0A, 9.0.1 before 9.0.1.1083, 9.0.1A before 9.0.1.5073, 9.0.2 before 9.0.2.1095, and 9.0.2A before 9.0.2.5144 allows remote attackers to read arbitrary charts by specifying an internal chart name...

CVE-2015-8577

Summary: CVE-2015-8577 affects McAfee VirusScan Enterprise prior to 8.8 Patch 6. The vulnerability lies in the Buffer Overflow Protection (BOP) feature, which allocates memory with Read/Write/Execute (RWX) permissions at predictable addresses on 32‑bit systems while protecting another application...

Freemake Video Converter 4.1.7 - Code Execution

Document Title: =============== Freemake Video Converter 4.1.7 - Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1616 Release Date: ============= 2015-10-09 Vulnerability Laboratory ID VL-ID: ==================================== 1616 Commo...

Freemake Video Converter 4.1.7 - Code Execution

Document Title: =============== Freemake Video Converter 4.1.7 - Code Execution References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1616 Release Date: ============= 2015-10-08 Vulnerability Laboratory ID VL-ID: ==================================== 1616 Commo...

Zhone ADSL2+ 4P Authentiation Bypass / Information Disclosure

Document Title: =============== Zhone ADSL2+ 4P Bridge & Router Broadcom - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1591 Download: http://www.zhone.com/support/downloads/cpe/6218-I2/6218-I2R030220AnnexA.zip Release Date:...

Zhone ADSL2+ 4P Bridge Router (Broadcom) - Multiple Vulnerabilities

Zhone ADSL2+ 4P Bridge Router Broadcom - Multiple Vulnerabilities Document Title: =============== Zhone ADSL2+ 4P Bridge & Router Broadcom - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1591 Download:...

Cross site scripting

Cross-site scripting XSS vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated users to inject arbitrary web script or HTML via a password entry, which is not properly handled when toggling the password mask...

CVE-2014-6123

IBM Rational AppScan Source 8.0 through 8.0.0.2 and 8.5 through 8.5.0.1 and Security AppScan Source 8.6 through 8.6.0.2, 8.7 through 8.7.0.1, 8.8, 9.0 through 9.0.0.1, and 9.0.1 allow local users to obtain sensitive credential information by reading installation logs...

CVE-2014-6122

IBM Security AppScan Enterprise 8.5 before 8.5 IFix 002, 8.6 before 8.6 IFix 004, 8.7 before 8.7 IFix 004, 8.8 before 8.8 iFix 003, 9.0 before 9.0.0.1 iFix 003, and 9.0.1 before 9.0.1 iFix 001 allows remote authenticated users to write to arbitrary folders, and consequently execute arbitrary...

Novell NCP Pre-Auth Remote Root Exploit

No description provided by source. In the interest of full-disclosure, here is a remote exploit for the vulnerability found by David Klein: Demonstration Novell NCP Pre-Auth Remote Stack Buffer Overflow Connecting to host 127.0.0.1... Connected! Sending message 1 23 bytes -- 44 6d 64 54 00 00 00 ...